Privacy Policy

Welcome to GrowCartBD. Your privacy is important to us. This Privacy Policy explains how GrowCartBD collects, uses, stores, protects, and manages your personal information when you visit our website, create an account, purchase digital products, or contact our support team.

By accessing GrowCartBD (including all subdomains, account dashboards, and digital services), you acknowledge that you have read, understood, and consented to the practices described in this policy. If you do not agree with this policy, please discontinue use of our platform immediately.

GrowCartBD collects only the information necessary to provide reliable digital license key distribution, wallet management, and customer support. Specifically, we may collect:

• Identity & Contact Information: Full name, chosen username, email address, WhatsApp/Telegram phone number, and optional gamer tag. • Account Information: Unique customer ID (e.g. #GCB10284), registered country or selected region code (BD, IN, or INT), account creation timestamp, and encrypted password credentials. • Order & Transaction Records: Order identifiers, purchased product variants, package duration, transaction reference codes, payment gateway invoice IDs, payment status (paid, pending, cancelled, or failed), and delivery receipts. • Wallet Financial Records: Ledger deposit amounts, balance adjustments, transaction history in minor units (poisha), and wallet activity timestamps. • Technical & Device Telemetry: IP address, device type, operating system version, browser user agent, preferred language, and session identifiers. • Customer Support Communications: Messages, screenshots, ticket correspondence, and inquiries submitted via our on-site ticketing desk or official Telegram channel.

We do not collect physical shipping addresses, identity cards, biometric records, or sensitive personal data that is irrelevant to our digital marketplace services.

GrowCartBD utilizes the collected information strictly for operational, security, and fulfillment purposes, including:

• Creating and maintaining your customer profile and region-locked account settings. • Processing order checkouts and delivering purchased VIP panel keys, accounts, or setup guides to your account vault. • Managing panel key activation timestamps, duration validity, and expiration tracking under My Keys. • Handling non-withdrawable wallet credits, ledger accounting, and authorized checkout debits. • Executing server-side payment verification and validating gateway callbacks to prevent unauthorized access. • Mitigating fraud, detecting duplicate checkout attempts, and safeguarding against abusive chargebacks. • Delivering automated transaction receipts, password reset notifications, and urgent security advisories. • Responding to support inquiries, technical troubleshooting requests, and digital warranty claims. • Ensuring compliance with applicable commercial, financial, and tax record-keeping regulations.

GrowCartBD processes regional payments through vetted third-party merchant gateways. Depending on your permanently selected region:

• Bangladesh (BDT ৳): Processed via Paymently and official Mobile Financial Services (MFS) including bKash, Nagad, Rocket, and Upay. • India (INR ₹): Processed via Razorpay supporting UPI (Google Pay, PhonePe, Paytm, BHIM) and authorized net banking. • International (USD $): Processed via cryptocurrency settlement gateways including Binance Pay, NOWPayments, and Cryptomus.

Important Financial Safeguard: GrowCartBD never collects, handles, or stores your credit card numbers, debit card CVV codes, mobile banking PINs, or cryptocurrency private keys. All payment processing occurs on the PCI-DSS compliant, encrypted checkout pages of our designated payment gateways under their respective independent privacy terms.

GrowCartBD provides a digital customer wallet designed for instant one-click order checkouts.

• The wallet operates on an immutable, minor-unit (poisha) financial ledger. • Deposits made via supported payment gateways are credited automatically following automated server verification. • Wallet balances are strictly non-withdrawable and intended solely for digital purchases within the GrowCartBD catalog. • All wallet credits, purchase deductions, and promotional credits are logged with permanent transaction reference codes for accounting accuracy and dispute resolution.

We utilize lightweight, functional browser cookies and HTML5 local storage strictly to ensure optimal platform performance:

• Essential Cookies: Maintain your encrypted authentication session and secure login token. • Shopping Cart Cookies: Preserve items placed in your cart drawer across page reloads. • Preference Cookies: Store your preferred display language (Bangla, Hindi, English) and active currency view. • Security Cookies: Assist in Cross-Site Request Forgery (CSRF) protection and rate-limiting.

You can modify or disable non-essential cookies via your web browser settings. Please note that disabling essential cookies will prevent authentication and cart checkouts from functioning.

GrowCartBD respects your trust. We do not sell, rent, monetize, or trade your personal information with third-party advertisers or marketing data brokers. Information is shared only with trusted operational providers under strict confidentiality obligations:

• Payment Providers: To initiate checkout sessions and execute server-to-server transaction verification. • Infrastructure & Cloud Hosts: To host encrypted databases and perform automated backups under enterprise security. • Transactional Email & Messaging: To dispatch order keys, password reset links, and critical alerts. • Legal & Law Enforcement Authorities: Only when strictly required by a valid court order, subpoena, or applicable statutory law to prevent fraud or criminal activity.

We implement robust technical and procedural safeguards to protect your data:

• End-to-end TLS/HTTPS encryption for all data in transit across public networks. • Hardware-grade AES-256-GCM encryption for stored digital license keys and credentials. • PBKDF2 / Argon2 cryptographic password hashing via Google Firebase Authentication. • Principle of least privilege restricting administrative database access to verified staff with audit logging. • Automated rate-limiting, IP throttling, and sandbox bot inspection.

While we implement industry-standard safeguards, no digital system can claim absolute immunity against attacks. Customers are urged to use unique, strong passwords and safeguard their account credentials.

GrowCartBD retains customer information only for the duration necessary to satisfy operational and legal requirements:

• Account profiles remain active until deleted by customer request or terminated for policy violations. • Delivered digital license keys are retained in your encrypted customer vault so you can reference them whenever needed. • Financial transactions, invoices, and payment logs are retained for a minimum of 5 years to comply with standard audit and tax regulations. • Inactive temporary session tokens and unfulfilled abandoned cart items are purged automatically after 30 days.

Depending on your jurisdiction, you possess the right to:

• Access the personal information stored in your customer profile. • Request correction of inaccurate contact numbers, usernames, or profile settings via /account/settings. • Request permanent account deactivation and deletion of personal profile data, subject to non-waivable financial and tax retention obligations. • Lodge an inquiry or complaint regarding our privacy handling through our official ticketing system.

To exercise these rights, submit a formal request via /account/support with your registered account email.

GrowCartBD is strictly targeted at users who have reached the legal age of digital consent in their respective jurisdictions. We do not knowingly collect personal information from individuals under 13 (or under 16 where required by local law). If we discover that a minor's information was submitted without parental consent, we will take immediate steps to delete the profile.

Our cloud hosting infrastructure and payment gateways operate distributed international servers. By using GrowCartBD, you consent to the cross-border transfer of encrypted operational data necessary to complete digital transactions.

GrowCartBD reserves the right to revise this Privacy Policy periodically. Any updates will be published on this page with an amended Effective Date. Your continued use of the platform following published modifications signifies your acceptance of the updated terms.

For questions, data access requests, or privacy concerns, please contact our administrative desk:

• Support Portal: https://growcartbd.cv/account/support • Official Telegram Channel: https://t.me/growcartbd • Official Telegram Community Chat: https://web.telegram.org/k/#-4394467219 • Account Dashboard: https://growcartbd.cv/account